The new class loader of the redeployed application is used to
deserialize any sessions previously saved. The usual restrictions
about serialization and deserialization apply. For example, any application-specific
class referenced by a session attribute may evolve only in a backward-compatible
fashion. For more information about class loaders, see Chapter 2, Class Loaders.